<html><body><div style="color:#000; background-color:#fff; font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;font-size:10pt"><div><span></span></div><div>Alan, I did run in debugging mode. I didn't notice any error. I'm attaching here in case I have missed something.</div><div><br></div><div>Attaching debug.</div><div>NAS=10.106.1.45</div><div>radius svr 2 = 10.101.248.112 </div><div>What I see is after the Access Req/Resp, the NAS keeps sending Accounting Reqs.</div><div>Looking at tcpdump, I can see the Acct Response packet makes it from svr2 to srv1, but there is an ICMP port not reachable, which</div><div>I interpret to mean svr1 is not listening on that port (expected because replicate is fire and forget)</div><div>But then why doesn't svr1 respond to the NAS with an Accounting Response?</div><div>It fails to do so, so in a few sec, the NAS sends another accounting
req. </div><div>This cycle repeats a few times - sometimes NAS just won't give up.</div><div><br></div><div><br></div><div>rad_recv: Access-Request packet from host 10.106.1.45 port 35711, id=121, length=191<br> User-Name = "QAQAQA_00"<br> User-Password = "testing"<br> NAS-Port = 77824<br> Service-Type = Framed-User<br> Framed-Protocol = PPP<br> Called-Station-Id = "XX.25.104.52"<br> Calling-Station-Id = "XX.226.96.135"<br> NAS-Port-Type = Virtual<br> Tunnel-Client-Endpoint:0 = "XX.226.96.135"<br> NAS-IP-Address =
10.106.1.45<br> Cisco-AVPair = "ip:source-ip=96.226.96.135"<br> Vendor-3076-Attr-146 = 0x4d6f62696c65587072657373696f6e<br> Vendor-3076-Attr-150 = 0x00000001<br># Executing section authorize from file /etc/raddb/sites-enabled/default<br>+- entering group authorize {...}<br>++[preprocess] returns ok<br>++[chap] returns noop<br>++[mschap] returns noop<br>[suffix] No '@' in User-Name = "QAQAQA_00", looking up realm NULL<br>[suffix] Found realm "NULL"<br>[suffix] Adding Stripped-User-Name = "QAQAQA_00"<br>[suffix] Adding Realm = "NULL"<br>[suffix] Authentication realm is LOCAL.<br>++[suffix] returns ok<br>++[unix] returns notfound<br>[files] users: Matched entry DEFAULT at line 172<br>++[files] returns ok<br>[sql] expand: %{User-Name} -> QAQAQA_00<br>[sql] sql_set_user escaped user --> 'QAQAQA_00'<br>rlm_sql (sql):
Reserving sql socket id: 19<br>[sql] expand: SELECT id, username, attribute, value, op FROM radcheck WHERE username = '%{SQL-User-Name}' ORDER BY id -> SELECT id, username, attribute, value, op FROM radcheck WHERE username = 'QAQAQA_00' ORDER BY id<br>[sql] User found in radcheck table<br>[sql] expand: <snip><br>[sql] expand: SELECT groupname FROM radusergroup WHERE username =
'%{SQL-User-Name}' ORDER BY priority -> SELECT groupname FROM radusergroup WHERE username = 'QAQAQA_00' ORDER BY priority<br>rlm_sql (sql): Released sql socket id: 19<br>++[sql] returns ok<br>++[expiration] returns noop<br>++[logintime] returns noop<br>++[pap] returns updated<br>Found Auth-Type = PAP<br># Executing group from file /etc/raddb/sites-enabled/default<br>+- entering group PAP {...}<br>[pap] login attempt with password "testing"<br>[pap] Using clear text password "testing"<br>[pap] User authenticated successfully<br>++[pap] returns ok<br># Executing section post-auth from file /etc/raddb/sites-enabled/default<br>+- entering group post-auth {...}<br>++[exec] returns noop<br>Sending Access-Accept of id 121
to 10.106.1.45 port 35711<br> Framed-Protocol = PPP<br> Framed-Compression = Van-Jacobson-TCP-IP<br> Framed-IP-Address := 172.24.0.1<br>Finished request 0.<br>Going to the next request<br>Waking up in 4.9 seconds.<br>rad_recv: Accounting-Request packet from host 10.106.1.45 port 57645, id=122, length=185<br> User-Name = "QAQAQA_00"<br> NAS-Port = 77824<br> Service-Type = Framed-User<br> Framed-Protocol = PPP<br> Framed-IP-Address = 172.24.0.1<br> Called-Station-Id = "XX.25.104.52"<br> Calling-Station-Id =
"XX.226.96.135"<br> Acct-Status-Type = Start<br> Acct-Delay-Time = 0<br> Acct-Session-Id = "7B600012"<br> Acct-Authentic = RADIUS<br> NAS-Port-Type = Virtual<br> Tunnel-Client-Endpoint:0 = "XX.226.96.135"<br> Vendor-3076-Attr-146 = 0x4d6f62696c65587072657373696f6e<br> Vendor-3076-Attr-150 = 0x00000001<br> Vendor-3076-Attr-151 = 0x00000005<br> NAS-IP-Address = 10.106.1.45<br># Executing section preacct from file /etc/raddb/sites-enabled/default<br>+- entering group preacct {...}<br>++[preprocess] returns ok<br>++[control] returns
ok<br>[acct_unique] Hashing 'NAS-Port = 77824,Client-IP-Address = 10.106.1.45,NAS-IP-Address = 10.106.1.45,Acct-Session-Id = "7B600012",User-Name = "QAQAQA_00"'<br>[acct_unique] Acct-Unique-Session-ID = "252b24a78b654e27".<br>++[acct_unique] returns ok<br>[suffix] No '@' in User-Name = "QAQAQA_00", looking up realm NULL<br>[suffix] Found realm "NULL"<br>[suffix] Adding Stripped-User-Name = "QAQAQA_00"<br>[suffix] Adding Realm = "NULL"<br>[suffix] Proxying request from user QAQAQA_00 to realm NULL<br>[suffix] Preparing to proxy accounting request to realm "NULL"<br>++[suffix] returns updated<br>++[files] returns noop<br># Executing section accounting from file /etc/raddb/sites-enabled/default<br>+- entering group accounting {...}<br>[sql] expand: %{User-Name} -> QAQAQA_00<br>[sql] sql_set_user escaped user --> 'QAQAQA_00'<br>[sql] expand: %{Acct-Delay-Time} -> 0<br>[sql] expand: INSERT INTO radacct...
<snip><br>rlm_sql (sql): Reserving sql socket id: 18<br>rlm_sql (sql): Released sql socket id: 18<br>++[sql] returns ok<br>[replicate] Replicating packet to Realm NULL<br>Sending Accounting-Request of id 114 to 10.101.248.112 port 1813<br> User-Name = "QAQAQA_00"<br> NAS-Port = 77824<br> Service-Type = Framed-User<br> Framed-Protocol = PPP<br> Framed-IP-Address = 172.24.0.1<br> Called-Station-Id = "XX.25.104.52"<br> Calling-Station-Id = "XX.226.96.135"<br> Acct-Status-Type = Start<br> Acct-Delay-Time = 0<br> Acct-Session-Id =
"7B600012"<br> Acct-Authentic = RADIUS<br> NAS-Port-Type = Virtual<br> Tunnel-Client-Endpoint:0 = "XX.226.96.135"<br> Vendor-3076-Attr-146 = 0x4d6f62696c65587072657373696f6e<br> Vendor-3076-Attr-150 = 0x00000001<br> Vendor-3076-Attr-151 = 0x00000005<br> NAS-IP-Address = 10.106.1.45<br>++[replicate] returns ok<br>Finished request 1.<br>Cleaning up request 1 ID 122 with timestamp +18<br>Going to the next request<br>Waking up in 3.7 seconds.<br>Cleaning up request 0 ID 121 with timestamp +17</div><div style="color: rgb(0, 0, 0); font-family: HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif; font-size: 13.33px; font-style: normal;
background-color: transparent;">Ready to process requests.<br>rad_recv: Accounting-Request packet from host 10.106.1.45 port 57645, id=123, length=185<br> User-Name = "QAQAQA_00"<br> NAS-Port = 77824<br> Service-Type = Framed-User<br> Framed-Protocol = PPP<br> Framed-IP-Address = 172.24.0.1<br> Called-Station-Id = "XX.25.104.52"<br> Calling-Station-Id = "XX.226.96.135"<br> Acct-Status-Type = Start<br> Acct-Delay-Time = 5<br> Acct-Session-Id = "7B600012"<br> Acct-Authentic =
RADIUS<br> NAS-Port-Type = Virtual<br> Tunnel-Client-Endpoint:0 = "XX.226.96.135"<br> Vendor-3076-Attr-146 = 0x4d6f62696c65587072657373696f6e<br> Vendor-3076-Attr-150 = 0x00000001<br> Vendor-3076-Attr-151 = 0x00000005<br> NAS-IP-Address = 10.106.1.45<br># Executing section preacct from file /etc/raddb/sites-enabled/default<br>+- entering group preacct {...}<br>++[preprocess] returns ok<br>++[control] returns ok<br>[acct_unique] Hashing 'NAS-Port = 77824,Client-IP-Address = 10.106.1.45,NAS-IP-Address = 10.106.1.45,Acct-Session-Id = "7B600012",User-Name = "QAQAQA_00"'<br>[acct_unique] Acct-Unique-Session-ID = "252b24a78b654e27".<br>++[acct_unique] returns ok<br>[suffix] No '@' in User-Name = "QAQAQA_00",
looking up realm NULL<br>[suffix] Found realm "NULL"<br>[suffix] Adding Stripped-User-Name = "QAQAQA_00"<br>[suffix] Adding Realm = "NULL"<br>[suffix] Proxying request from user QAQAQA_00 to realm NULL<br>[suffix] Preparing to proxy accounting request to realm "NULL"<br>++[suffix] returns updated<br>++[files] returns noop<br># Executing section accounting from file /etc/raddb/sites-enabled/default<br>+- entering group accounting {...}<br>[sql] expand: %{User-Name} -> QAQAQA_00<br>[sql] sql_set_user escaped user --> 'QAQAQA_00'<br>[sql] expand: %{Acct-Delay-Time} -> 5<br>[sql] expand: INSERT INTO radacct ...<snip><br>rlm_sql (sql): Reserving sql socket id: 17</div><div style="color: rgb(0, 0, 0); font-family: HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif; font-size: 13.33px; font-style: normal;
background-color: transparent;">rlm_sql (sql): Released sql socket id: 17<br>++[sql] returns ok<br>[replicate] Replicating packet to Realm NULL<br>Sending Accounting-Request of id 118 to 10.101.248.112 port 1813<br> User-Name = "QAQAQA_00"<br> NAS-Port = 77824<br> Service-Type = Framed-User<br> Framed-Protocol = PPP<br> Framed-IP-Address = 172.24.0.1<br> Called-Station-Id = "XX.25.104.52"<br> Calling-Station-Id = "XX.226.96.135"<br> Acct-Status-Type = Start<br> Acct-Delay-Time = 5<br> Acct-Session-Id =
"7B600012"<br> Acct-Authentic = RADIUS<br> NAS-Port-Type = Virtual<br> Tunnel-Client-Endpoint:0 = "XX.226.96.135"<br> Vendor-3076-Attr-146 = 0x4d6f62696c65587072657373696f6e<br> Vendor-3076-Attr-150 = 0x00000001<br> Vendor-3076-Attr-151 = 0x00000005<br> NAS-IP-Address = 10.106.1.45<br>++[replicate] returns ok<br>Finished request 2.<br>Cleaning up request 2 ID 123 with timestamp +23<br>Going to the next request<br>Ready to process requests.</div><div style="color: rgb(0, 0, 0); font-family: HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif; font-size: 13.33px; font-style: normal; background-color: transparent;">rad_recv: Accounting-Request
packet from host 10.106.1.45 port 57645, id=124, length=185<br> User-Name = "QAQAQA_00"<br> NAS-Port = 77824<br> Service-Type = Framed-User<br> Framed-Protocol = PPP<br> Framed-IP-Address = 172.24.0.1<br> Called-Station-Id = "XX.25.104.52"<br> Calling-Station-Id = "XX.226.96.135"<br> Acct-Status-Type = Start<br> Acct-Delay-Time = 10<br> Acct-Session-Id = "7B600012"<br> Acct-Authentic = RADIUS<br> NAS-Port-Type =
Virtual<br> Tunnel-Client-Endpoint:0 = "XX.226.96.135"<br> Vendor-3076-Attr-146 = 0x4d6f62696c65587072657373696f6e<br> Vendor-3076-Attr-150 = 0x00000001<br> Vendor-3076-Attr-151 = 0x00000005<br> NAS-IP-Address = 10.106.1.45<br># Executing section preacct from file /etc/raddb/sites-enabled/default<br>+- entering group preacct {...}<br>++[preprocess] returns ok<br>++[control] returns ok<br>[acct_unique] Hashing 'NAS-Port = 77824,Client-IP-Address = 10.106.1.45,NAS-IP-Address = 10.106.1.45,Acct-Session-Id = "7B600012",User-Name = "QAQAQA_00"'<br>[acct_unique] Acct-Unique-Session-ID = "252b24a78b654e27".<br>++[acct_unique] returns ok<br>[suffix] No '@' in User-Name = "QAQAQA_00", looking up realm NULL<br>[suffix] Found realm "NULL"<br>[suffix] Adding
Stripped-User-Name = "QAQAQA_00"<br>[suffix] Adding Realm = "NULL"<br>[suffix] Proxying request from user QAQAQA_00 to realm NULL<br>[suffix] Preparing to proxy accounting request to realm "NULL"<br>++[suffix] returns updated<br>++[files] returns noop<br># Executing section accounting from file /etc/raddb/sites-enabled/default<br>+- entering group accounting {...}<br>[sql] expand: %{User-Name} -> QAQAQA_00<br>[sql] sql_set_user escaped user --> 'QAQAQA_00'<br>[sql] expand: %{Acct-Delay-Time} -> 10<br>[sql] expand: INSERT INTO radacct ...<snip><br>rlm_sql (sql): Reserving sql socket id: 16<br>rlm_sql (sql): Released sql socket id: 16<br>++[sql] returns ok</div><div style="color: rgb(0, 0, 0); font-family: HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif; font-size: 13.33px; font-style: normal; background-color:
transparent;">[replicate] Replicating packet to Realm NULL<br>Sending Accounting-Request of id 122 to 10.101.248.112 port 1813<br> User-Name = "QAQAQA_00"<br> NAS-Port = 77824<br> Service-Type = Framed-User<br> Framed-Protocol = PPP<br> Framed-IP-Address = 172.24.0.1<br> Called-Station-Id = "XX.25.104.52"<br> Calling-Station-Id = "XX.226.96.135"<br> Acct-Status-Type = Start<br> Acct-Delay-Time = 10<br> Acct-Session-Id = "7B600012"<br> Acct-Authentic =
RADIUS<br> NAS-Port-Type = Virtual<br> Tunnel-Client-Endpoint:0 = "XX.226.96.135"<br> Vendor-3076-Attr-146 = 0x4d6f62696c65587072657373696f6e<br> Vendor-3076-Attr-150 = 0x00000001<br> Vendor-3076-Attr-151 = 0x00000005<br> NAS-IP-Address = 10.106.1.45<br>++[replicate] returns ok<br>Finished request 3.<br>Cleaning up request 3 ID 124 with timestamp +28<br>Going to the next request<br>Ready to process requests.<br><br></div> </div></body></html>